Boeing Privacy and Cookie Statement

Thank you for reviewing the Boeing Privacy and Cookie Statement (“Statement”). The Boeing Company and its group of companies, which use brands including, but not limited to, Jeppesen and ForeFlight (collectively “Boeing”) are sensitive to the issue of confidentiality in online interactions and are committed to protecting individual privacy across our range of websites, mobile applications, products, solutions, and services (collectively our "Services" or “Boeing Services”).

This Statement applies to visitors and users of Boeing Services that link to this Statement. Some of our services adopt different privacy statements, or privacy notices that supplement this Statement, to better fit transactions taking place on those Boeing Services or in accordance with local privacy laws. If a Service or brand has its own privacy statement or a supplementary notice, the provisions of that statement or supplementary notice will take priority if conflicting with this Statement.

If you are a California resident, you may be entitled to additional rights over your personal information. For more information about those rights and how to exercise them, please see our Privacy Notice for California Residents here, which is incorporated by reference into this policy.

For your convenience, Boeing Services enable purchases, subscriptions, or use of other products and online services from other entities with different privacy practices, and the personal information collected in those instances will be governed by the respective privacy policies or statements of those other entities.

Collection and use of personal information
Collection and use of location data
Collection and use of automated processing
Information collected automatically
      Cookies and tracers
      Third-party cookies and tracers
      Interest-based advertising
      Cross-device tracking
Organizational services data
Disclosure of personal information
Location of data processing
Retention of personal information
Security of personal information
Children’s privacy
Exercise of rights per the European Union General Data Protection Regulation
Corporate changes
Contact us
Boeing EU-U.S. UK Extension to the EU-U.S., and Swiss-U.S. Data Privacy Framework Statement
Statement revision

Collection and use of personal information
Boeing Services collect personal information from and about individuals for a variety of purposes. In some cases, Boeing requests personal information from you, or from your employer in the case of organizational Services. In other cases, we obtain personal information by noting how you and the devices you use interact with our Services. Examples of personal information include:

• first and last names
• job titles or roles
• phone numbers
• e-mail addresses
• shipping and billing addresses
• login credentials
• passport or government identification information
• gender
• date of birth
• country of residence
• web statistics and use (see Information collected automatically)

Boeing uses your personal information in a variety of ways, depending on how you interact with Boeing Services, including to:

• maintain and provide you with Services
• provide customer support, including online chat features provided by Services
• fulfill underlying transactions on our Services
• allow access to account information and Service features
• respond to your questions or instructions concerning the Services
• deliver confirmations, account information, notifications, and similar operational communications
• improve your user experience and the quality of our products and Services
• market and advertise our products and services
• enable you to share information with social networks and to interact with Boeing on social media sites
• maintain the integrity of our network and address security issues
• investigate or take action regarding violations or suspected violations of law or our terms
• comply with legal and/or regulatory requirements

We and our service providers also use the information you provide to send you communications, including promotional messages about Boeing and topics of interest, via email, postal mail, fax, SMS and phone, as permitted by local law and subject to your contact preferences. Although we hope you will find our promotional communications of interest, you are able to opt out of receiving them by following the instructions included in each communication.

You can choose to follow our brands and companies on social media, or log in to some Boeing Services using social media account credentials. Your use of social media features could result in the collection or sharing of information about you, depending on the feature. The details we receive depends on your social network account privacy settings. We encourage you to review the privacy practices and settings of the social media sites you use to make sure you understand the personal information that may be collected, used, and shared by those sites.

We acquire data from third-party sources that are either publicly or commercially available. This information includes personal information such as your name, address, email address, preferences, interests, and demographic data. We combine personal information collected through our Services with other information that we or third parties collect about you in other contexts, such as our communications with you via email or phone, or your customer service records. We treat such combined information as personal information and protect it in accordance with this Statement.

Collection and use of location data
Boeing applications use geolocation features (GPS or network-based) to support your use of location-based tools such as airport/map views, city code searches and other features, as well as to improve Boeing applications. When you use Boeing Services, we collect and process information about your pinpointed location, after obtaining consent as required by local law. We use various technologies to determine location, including IP address, GPS, and other sensors that, for example, provide us with information on nearby devices, Wi-Fi access points, and cell towers. Location data is used in accordance with Collection and use of personal information, and disclosed in accordance with Disclosure of personal information. You are able to withdraw your permission for Boeing to acquire pinpointed location information from your device through your device settings, although Boeing does not control this process. If your device is owned by your organization, your ability to withdraw your permission for pinpointing location information will depend on your organization’s policies.

Collection and use of automated processing
Boeing may make certain decisions based solely on automated processing in a variety of ways (including through the use of machine learning and artificial intelligence) to support and improve the Services. Boeing does not, however, subject your personal information to automated decision making that produces legal or similarly significant effects. To exercise any rights and choices available, you can visit the Boeing Privacy Rights Request Portal at https://boeing.com/privacy/rightsexerciseportal.

Information collected automatically
Boeing uses various digital analytics tools to collect data for metrics, fraud prevention, and service improvement purposes and to customize the content and layout of our pages for each individual visitor. Each time you visit Boeing Services, we may automatically collect certain types of information. Some examples of information automatically collected are as follows:

• Your IP address and approximate physical location, MAC address, browser type, operating system, device-identifying information, type of computer or device, and type of Web browser software, the specific webpages visited during your connection, and the domain name from which you accessed the Boeing Services.
• Information about your browsing behavior including through the use of session replays / screen capture tools, such as the date and time you visit the Boeing Services, the areas or pages of the Boeing Services that you visit, the amount of time you spend viewing the Boeing Services, the number of times you return to the Boeing Services and other clickstream data.
• We may use “cookies” of different types to recognize your device. A cookie is a small text file that a website, online application, or e-mail may save to your Web browser and/or your device memory for use in subsequent visits to the Site or other sites. See below for more information on cookies.
• We may use web beacons, match scripts, pixel tags or similar technologies that allow us to know if a particular web page was visited, an e-mail opened, or links in the email used. In some instances, these technologies may allow us to match activities with particular users.

When you visit Boeing Services and you have not otherwise identified yourself (e.g., via registration with a Boeing Service), our web servers automatically recognize your domain name, but not your e-mail address. We also collect firmographic information about your company, if you are visiting Boeing Services from your company domain. We collect the domain name and monitor general site use and traffic patterns to improve the Services that we offer.

Cookies and tracers
Cookies are currently the best way to effectively identify unique website visitors and understand how they navigate our Services. Cookies are small data files placed on your device by a website when you visit. Boeing uses cookies set by us or other companies for tracking purposes or to make our Services easier to use and tailored for individual users. Like many websites, we do not currently respond to “do not track” browser headers except where legally required. But with most Web browsers, you can take steps to limit tracking by erasing cookies from your device and by setting your browser to block all cookies or warn you before a cookie is stored. Cookies offer enhanced functionality to the user, but whether you allow a cookie to be placed on your device is up to you.

Boeing uses, and permits service providers to use, tracking scripts or “tracers” and web beacons that recognize a unique identifier from a cookie placed on your device by another website. For example, we use a tracer to determine whether you visit our pages after visiting a site where we placed a banner ad. We also use these technologies to compile information about your website usage and your interaction with email or other communications, to measure performance, and to provide content and ads that are more relevant to you. A web beacon is typically a transparent graphic image that can be embedded in online content, videos, and emails, and can allow a server to read certain types of information from your device, know when you have viewed the beacon, and the IP address of your device. For example, we include web beacons in our promotional email messages or newsletters to determine whether our messages have been opened or interacted with and whether our mailing tools are working properly.

While our cookie names will change over the course of time, they generally fall into the following categories:

Third-party cookies and tracers
Boeing Services often contain cookies or similar technologies from third-party providers that help us compile statistics about the effectiveness of our promotional campaigns, perform analytics, enable social networking features, and other operations. These technologies enable the third-party providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across the Services and other, unaffiliated devices, applications, websites, or services. You can opt out of data collection or use by some of these third-party providers by visiting the following links:

• http://tools.google.com/dlpage/gaoptout
• http://www.adobe.com/privacy/opt-out.html
• https://www.scorecardresearch.com/optout.aspx

Interest-based advertising
Boeing also enables cookies and third-party tracking mechanisms to collect your information for use in interest-based advertising. For example, third parties use the fact that you visited our Services to target online ads for Boeing Services to you on non-Boeing websites. In addition, our third-party advertising networks use information about your use of our Services to help target non-Boeing advertisements based on your online behavior in general. Learn more about interest-based advertising, or opt out of the practice, by visiting the following links:

• http://www.networkadvertising.org/choices
• http://www.aboutads.info/choices
• https://www.google.com/settings/ads/plugin

For more information on opting out of mobile interest-based advertising, please visit the following link:

• https://www.aboutads.info/appchoices

Cross-device tracking
Data collected from a particular browser, app, or device can be used with a linked computer or device. For example, we or our third-party service providers display ads to you on your laptop or other device based on the fact that you visited Boeing Services on your smartphone. You can opt out of cross-device tracking on each of your browsers and devices by using the links provided above (see Interest-based advertising). Please note that the opt-out will apply only to the specific browser or device from which you opt out, and you need to opt out separately on all of your browsers and devices.

Organizational services data
Many Boeing Services are intended for use by organizations. If you interact with our Services through an account provided by your organization, the organization typically administers your Services account, and controls and accesses your data, including the contents of files stored on our Services. Boeing is not responsible for the privacy or security practices of organizational customers, which differ from those set forth in this Statement, as they are administered by these organizations. The types of data processed by our Services include the following:

Disclosure of personal information
When you provide personal information to Boeing or its entities and brands, we share that information with other Boeing entities and brands to provide a more unified customer experience. Certain Services must disclose information to third parties assisting us in processing a transaction requested by you (e.g., credit card service providers). In addition, Boeing hires service providers to perform work on its behalf. Any such service providers will be permitted to obtain data from the Services only to deliver the services Boeing has retained them to provide and will be prohibited from using data for any other purpose. Boeing discloses personal information to these service providers for the purposes identified in Collection and use of personal information, including to send promotional communications to you via email, postal mail, fax, SMS and phone as permitted by local law and subject to your contact preferences. In order to cooperate with legitimate governmental requests, subpoenas, or court orders, to protect Boeing and/or Boeing's systems and customers, to establish, protect, or exercise our legal rights or defend against legal claims, or to ensure the integrity and operation of Boeing and/or Boeing business and systems, Boeing accesses and discloses the necessary and appropriate information under the circumstances.

Location of data processing
Personal information that Boeing processes is transferred to, and stored and processed in, the United States or any other country in which Boeing or its affiliates or subcontractors maintain facilities. The data protection laws in these countries are different from, and could be less stringent than, those in your country of residence. We take steps to ensure that the data we collect under this Statement is processed according to the provisions of this Statement and the requirements of applicable law wherever the data is located.

Retention of personal information
Boeing stores your personal information for as long as you use the Services, and no longer than is necessary for the purposes for which the information was collected, or for which it is legitimately further processed. Thereafter, Boeing retains personal information for a period of time set forth in its corporate retention schedules. In the case of organizational Services data, Boeing retains personal information according to the timeframes set forth in relevant customer agreements, or in lieu of an agreement, for as long as a legitimate business purpose exists.

Security of personal information
Boeing is committed to helping protect the security of your information. We have implemented and will maintain appropriate technical and organizational measures to protect your information against accidental loss, destruction or alteration, unauthorized disclosure or access, or unlawful destruction. The Internet, however, cannot be guaranteed to be 100% secure, and we cannot ensure the security of any personal information provided to us.

Children’s privacy
In general, Boeing does not knowingly collect, use or disclose personal information from children, as defined by local law. If you believe that we have collected personal information about a child, please Contact Us so that we can delete the information. Additionally, please Contact Us to request removal of content or information that was posted to our Services when the registered user was under the age of 18. However, some Services may collect, use or disclose personal information from children (as defined by local law) where it is necessary to do so; for example, a child member of a group using International Trip Planning Services (ITPS). This information is necessary to fulfil travel arrangements, ensure safety, to meet legal and regulatory requirements, and to provide, or arrange for appropriate assistance or facilities where necessary. This information will be collected with the consent of a responsible adult or guardian where possible. The personal information will be appropriately designated for extra protections and review and removal at the earliest opportunity. This personal information from children will be flagged to avoid direct marketing.

Exercise of rights per the European Union General Data Protection Regulation
The following table is provided to facilitate the rights of individuals under Chapter III of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal information (also called personal data) and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) also known as the GDPR. We hope that the following questions and answers concerning Services and this web site are as concise, transparent, and intelligible as possible. We welcome suggestions for improvement of the content presented below:

If you have questions or concerns about privacy issues associated with this site, or if you need assistance to exercise any applicable privacy rights, you may contact the Boeing Global Privacy Office by any of the methods listed in Contact Us.

Corporate changes
In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock, Boeing is likely to disclose your personal information to the new owners, subject to a requirement that such information be used only in accordance with this Statement, or as otherwise permitted under an applicable agreement.

Contact us
We will provide you with access to your personal information that we hold for any purpose within practical and legal limits. This includes requests that we correct the data if it is inaccurate or delete the data if Boeing is not required to retain it by law or for legitimate business purposes.

If you interact with our Services through an account provided by your organization, that organization typically administers your account, and controls and accesses your data. If your organization is administering your use of our Services, you should direct privacy inquiries to your organizational administrator.

If you have a question about Boeing privacy practices or wish to submit a privacy rights request, please contact the Boeing Global Privacy Office using one of the following methods:

Boeing EU-U.S., UK extension to the EU-U.S., and Swiss-U.S. Data Privacy Framework Statement
The Boeing Company and its U.S. subsidiaries Boeing Distribution, Inc. and Boeing Digital Solutions, Inc. dba Jeppesen Sanderson (for the purposes of this section, collectively referred to as "Boeing DPF Companies") participate in the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) (collectively, the “DPF”) as set forth by the U.S. Department of Commerce. Boeing DPF Companies have certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union and United Kingdom (and Gibraltar) in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Boeing DPF Companies have certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Statement and the DPF Principles (collectively, the “Principles”), the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Boeing DPF Companies implement these Principles with respect to the personal information described in this Statement and according to the stated purposes for which such personal information is collected, used, shared, and retained. If we transfer personal information to a third party, the third party’s access, use, and disclosure of the personal information as well as any onward transfer must also be in compliance with the DPF, and we may be liable under the DPF for any such failure to do so by the third party. Please note that Boeing DPF Companies may disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. EU, UK, and Swiss individuals have rights to access Personal Information about them, and to limit use and disclosure of their Personal Information. To exercise your rights and choices please visit the Boeing Privacy Rights Request Portal at https://boeing.com/privacy/rightsexerciseportal. If you have any inquiries or complaints relating to Boeing DPF Companies’ handling of personal information received under the DPF, please Contact Us.

Boeing DPF Companies are subject to the investigatory and enforcement powers of the Federal Trade Commission. In compliance with the DPF, Boeing DPF Companies commit to resolve DPF-related complaints by using JAMS, an alternative dispute resolution provider which has locations in the United States, EU, the UK and Switzerland. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF-related complaint to your satisfaction, please visit https://www.jamsadr.com/eu-us-data-privacy-framework for more information or to file a complaint. The services of JAMS are provided at no cost to you. You may, under certain conditions, invoke binding arbitration. To learn more about these conditions and how to invoke binding arbitration, please visit https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.

Statement revision

When we modify our Privacy Statement, we will post the updated statement here, with an updated effective date, as indicated below.

Effective Date: Oct 31, 2023